459 matches found
EUVD-2020-17482
Malware in sbrugna...
CVE-2025-50505
Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...
CVE-2025-50505
Clash Verge Rev (versions through 2.2.3 ) is vulnerable to Local Privilege Escalation (LPE) and Remote Code Execution (RCE) due to an unauthenticated HTTP API endpoint (/start_clash) in the clash-verge-service component. The service, which runs with elevated privileges (root or SYSTEM), allows at...
EUVD-2025-32865
Clash Verge Rev thru 2.2.3 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for execution,...
CVE-2025-50505
Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...
PT-2025-40998
Name of the Vulnerable Software and Affected Versions Clash Verge versions through 2.2.3 Description The software installs system services clash-verge-service by default and exposes functions through an unauthorized HTTP API. Specifically, the /start clash API endpoint allows local users to submi...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-409873)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409873 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN:...
CVE-2025-50505: Execution with Unnecessary Privileges
Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...
CVE-2025-50505
Clash Verge Rev thru 2.2.3 fixed in 2.3.0 forces the installation of system servicesclash-verge-service by default and exposes key functions through the unauthorized HTTP API /startclash, allowing local users to submit arbitrary binpath parameters and pass them directly to the service process for...
Clash Verge Rev 安全漏洞
Clash Verge Rev is an open source proxy tool from Clash Verge Rev. A security vulnerability exists in Clash Verge Rev 2.2.3 and earlier versions, which stems from installing system services by default and exposing critical functionality via an unauthorized HTTP API, which could lead to local...
EUVD-2022-25838
Malicious code in bioql PyPI...
EUVD-2022-25839
Malicious code in bioql PyPI...
EUVD-2022-30818
Malicious code in bioql PyPI...
EUVD-2023-28264
Malicious code in bioql PyPI...
EUVD-2022-43445
Malicious code in bioql PyPI...
EUVD-2022-45586
Malicious code in bioql PyPI...
CVE-2025-39894
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge, brnflocalin is called to confirm the conntrack. If another conntrack with...
SUSE CVE-2025-39894
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge, brnflocalin is called to confirm the conntrack. If another conntrack with...
AZL-74745 CVE-2025-39894 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge, brnflocalin is called to confirm the conntrack. If another conntrack with...
UBUNTU-CVE-2025-39894
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm When send a broadcast packet to a tap device, which was added to a bridge, brnflocalin is called to confirm the conntrack. If another conntrack with...